Threat watch / Attack
Kinnarps: an IT attack stops production at three Swedish furniture factories
Swedish office furniture maker Kinnarps found abnormal activity in its networks on the evening of Saturday, November 7, 2026, and shut down its systems. All production stopped on Monday at its factories in Kinnarp, Jönköping and Skillingaryd, and was still stopped on Wednesday, November 11. The company has reported the attack to the police, says no ransom has been demanded, and does not know who is behind it.
- Sector
- Retail
- Way in
- Not public yet
- Product or vendor
- None named
- How it happened
- Not public yet Checked 15 Nov 2026
- What was stolen
- Not public yet Checked 15 Nov 2026
- Who was impacted
- Kinnarps itself: production stopped at three factories (Kinnarp, Jönköping and Skillingaryd; the Kinnarp plant alone employs about 650 people), its servers were shut down and its website went offline. Customers were asked to call the switchboard.[1][3][4] Checked 15 Nov 2026
- Threat actor
- Not attributed
Timeline
- On Saturday evening, Kinnarps finds abnormal activity in its networks and shuts down its systems. "When we discovered the data breach we acted immediately and shut down our systems to isolate and minimise the damage," says marketing director Ann Cederwall. [1][3][4]
- All production stops at the Kinnarp, Jönköping and Skillingaryd factories. The company reports the attack to the police and says no ransom demand has been made. [1][2][5]
- The three factories are still at a standstill; Kinnarps hopes to be back at full production later in the week. It says its IT team and outside experts traced fairly quickly where the attackers got in, without saying how. [3][4]